← Vulnerability feed

Vulnerability record · CVE-2004-0369 · published 31 December 2004

CVE-2004-0369: Entrust libkmp isakmp library vulnerability

Entrust · Entrust Libkmp Isakmp Library

Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5, allows remote attackers to execute arbitrary code via a crafted ISAKMP payload.

7.5 CVSS 2.0 High EPSS 4.4% · top 9.1%
7.5CVSS 2.0 base score
4.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
5Affected product versions listed by NVD
12References
16 Jun 2026Last modified by NVD

Description

Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5, allows remote attackers to execute arbitrary code via a crafted ISAKMP payload.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

5 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://securityresponse.symantec.com/avcenter/security/Content/2004.08.26.html Vendor Advisory
http://www.auscert.org.au/render.html?it=4339 Vendor Advisory
http://www.ciac.org/ciac/bulletins/o-206.shtml Vendor Advisory
http://www.securityfocus.com/bid/11039
http://xforce.iss.net/xforce/alerts/id/181 PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15669
http://securityresponse.symantec.com/avcenter/security/Content/2004.08.26.html Vendor Advisory
http://www.auscert.org.au/render.html?it=4339 Vendor Advisory
http://www.ciac.org/ciac/bulletins/o-206.shtml Vendor Advisory
http://www.securityfocus.com/bid/11039
http://xforce.iss.net/xforce/alerts/id/181 PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15669

Track CVE-2004-0369 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2007-0447Symantec antivirus scan engine memory buffer overflow vulnerabilityHeap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple c…EPSS 6.0%9.3CVE-2007-3699Symantec antivirus scan engine vulnerabilityThe Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in th…EPSS 3.9%9.3CVE-2007-4422Symantec enterprise firewall vulnerabilityThe login interface in Symantec Enterprise Firewall 6.x, when a VPN with pre-shared key (PSK) authentication is enabled, generates different response…EPSS 2.6%9.3CVE-2004-1029Hp java sdk-rte permissions and access controls vulnerabilityThe Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict acce…EPSS 17%7.8CVE-2002-2317Symantec velociraptor information exposure vulnerabilityMemory leak in the (1) httpd, (2) nntpd, and (3) vpn driver in VelociRaptor 1.0 allows remote attackers to cause a denial of service (memory consumpt…EPSS 1.7%7.5CVE-2005-3768Symantec enterprise firewall vulnerabilityBuffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic VPN Services, as used in Enterprise Firewall, Gatew…EPSS 3.8%7.5CVE-2002-1463Symantec enterprise firewall vulnerabilitySymantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security …EPSS 6.9%7.5CVE-2003-0106Symantec enterprise firewall vulnerabilityThe HTTP proxy for Symantec Enterprise Firewall (SEF) 7.0 allows proxy users to bypass pattern matching for blocked URLs via requests that are URL-en…EPSS 1.4%

Source: NIST National Vulnerability Database (record CVE-2004-0369), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.